$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: vpFMFFPtFiX/CNR4LZPrX+HoofyHlljoWrNoUDMngIo= Subject key identifier: 01:1E:14:19:77:CF:6A:62:BD:6F:F0:C8:BE:FD:AF:80:69:9C:D2:AF Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 0149 Signing time: Mon 09 Jun 2025 03:21:28 +0000 Manifest this update: Mon 09 Jun 2025 03:21:28 +0000 Manifest next update: Mon 16 Jun 2025 03:21:28 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: 8ou2tsUBAg9KcahsFL06V88MdLZmIHpGI6J2on9w5Gg=) 2: CE74C490AA4911EF80B4D381C4F9AE02.roa (hash: 9trSPATG6e6kZcNLx6FEo2PvgXLIh+akuZgMM6SjcBw=) 3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XwxYtSorve+SAC3u+XigKdLjB1a8nt+xDntpvYaL7J8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 03:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Jun 9 03:21:28 2025 GMT Not After : Jun 16 03:21:28 2025 GMT Subject: CN=68465338-db2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a5:3d:30:05:ca:a5:04:cf:7b:b1:92:ce:76: 96:30:ba:ff:eb:9d:9a:bc:bc:df:6f:1b:b9:d7:a5: 2a:e4:64:6a:8d:64:7e:d7:0a:6f:18:20:f5:f9:aa: 4f:a8:4e:ca:5e:ef:0b:8d:cd:3c:06:e2:c3:ab:a3: e2:18:1e:98:88:81:08:8f:c1:80:50:d4:b0:7b:d8: 16:65:0d:a6:64:2b:ca:35:1e:cd:aa:f2:8a:bd:f8: 6f:e8:17:09:93:d0:d7:7b:12:db:7d:e6:7a:b8:d9: 3e:02:e8:6a:ef:9e:37:18:55:ab:50:ad:81:e0:67: d0:bd:1f:56:7d:20:f3:4c:43:ff:45:21:ce:d0:ad: 04:5d:c3:28:63:2f:66:dd:64:a3:b6:ea:ff:c4:80: e4:7e:6c:c0:5b:f8:e9:a8:7a:a2:74:6c:c5:3d:60: be:56:4f:df:79:f9:18:50:7b:7c:da:f3:84:28:05: 7d:7f:ac:27:a4:48:fe:4e:42:bd:03:d4:6e:5c:64: 15:96:c9:f3:1a:d4:8d:ce:62:92:c5:61:53:03:ed: 38:c6:71:88:5c:6a:bb:97:ac:c8:6e:fe:87:af:99: 67:4a:40:56:27:fe:36:6d:44:0d:de:95:b8:68:fc: 98:d0:35:13:1b:88:53:51:70:ad:ab:3f:ed:68:ca: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1E:14:19:77:CF:6A:62:BD:6F:F0:C8:BE:FD:AF:80:69:9C:D2:AF X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:db:63:61:3a:0b:08:7e:95:65:fd:f2:63:59:c5:12:60:05: 5e:cf:d5:a9:31:5c:05:37:f4:e2:9e:02:b6:4d:d1:c2:69:e2: 01:59:21:8f:33:8b:75:43:4e:a3:d8:31:5f:7e:43:4b:4f:c4: e9:56:c6:15:d3:4b:d9:72:9a:ec:cc:45:75:7c:3b:8c:f3:5b: e5:d4:a0:70:c5:f1:13:6b:89:79:c5:2e:81:45:4d:bb:08:ff: ce:7d:03:9b:74:7d:0a:ae:43:76:66:0d:2a:c7:c6:c9:ce:99: 18:3e:7f:c0:bb:aa:03:61:00:61:5e:9c:1c:a2:cf:7a:3a:3a: 7d:73:b8:0e:58:5c:47:f9:08:e9:40:ca:38:ee:10:fa:58:92: fc:a5:7b:ca:96:29:4e:86:50:88:36:bc:77:c5:31:34:5a:da: 0b:3e:45:f5:67:14:b7:b2:95:6e:a4:2c:0e:b2:e3:42:a6:83: cb:2f:19:41:7b:a7:6c:8a:4c:68:4f:51:53:c1:d2:4a:e5:22: 1c:3c:23:ea:df:93:94:e3:8e:7f:32:72:4a:52:1b:0f:47:d8: 28:f1:3d:e4:52:57:27:2a:ac:89:20:6f:5f:2b:49:70:7e:ad: 1d:5e:7d:b2:ff:e4:a8:f2:d4:a1:d3:44:88:9a:74:65:1b:8e: 84:fe:94:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjUwNjA5MDMyMTI4WhcNMjUwNjE2MDMyMTI4WjAYMRYwFAYD VQQDEw02ODQ2NTMzOC1kYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKU9MAXKpQTPe7GSznaWMLr/652avLzfbxu516Uq5GRqjWR+1wpvGCD1+apP qE7KXu8Ljc08BuLDq6PiGB6YiIEIj8GAUNSwe9gWZQ2mZCvKNR7NqvKKvfhv6BcJ k9DXexLbfeZ6uNk+Auhq7543GFWrUK2B4GfQvR9WfSDzTEP/RSHO0K0EXcMoYy9m 3WSjtur/xIDkfmzAW/jpqHqidGzFPWC+Vk/fefkYUHt82vOEKAV9f6wnpEj+TkK9 A9RuXGQVlsnzGtSNzmKSxWFTA+04xnGIXGq7l6zIbv6Hr5lnSkBWJ/42bUQN3pW4 aPyY0DUTG4hTUXCtqz/taMqMrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEeFBl3 z2pivW/wyL79r4BpnNKvMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG22NhOgsIfpVl/fJjWcUSYAVez9WpMVwFN/TingK2TdHCaeIBWSGP M4t1Q06j2DFffkNLT8TpVsYV00vZcprszEV1fDuM81vl1KBwxfETa4l5xS6BRU27 CP/OfQObdH0KrkN2Zg0qx8bJzpkYPn/Au6oDYQBhXpwcos96Ojp9c7gOWFxH+Qjp QMo47hD6WJL8pXvKlilOhlCINrx3xTE0WtoLPkX1ZxS3spVupCwOsuNCpoPLLxlB e6dsikxoT1FTwdJK5SIcPCPq35OU445/MnJKUhsPR9go8T3kUlcnKqyJIG9fK0lw fq0dXn2y/+So8tSh00SImnRlG46E/pQ0 -----END CERTIFICATE-----Generated at Tue Jun 10 19:40:11 2025 by rpki-client